[SECURITY] Fedora 39 Update: grafana-pcp-5.1.1-4.fc39

This Grafana plugin for Performance Co-Pilot includes data sources for scalable time series from pmseries1 and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace1, as well as several dashboards...

CVSS v4 Is Now Live and What You Need To Know About It

On November 1st, 2023, the Common Vulnerability Scoring System version 4 CVSS v4 was officially launched in General Availability GA following a period of public preview and feedback collection. This launch was orchestrated by the Forum of Incident Response and Security Teams FIRST, marking a...

CVSS v4.0 Released with New Supplemental Metrics, and OT/ICS/IoT Support

By Deeba Ahmed IN SUMMARY The non-profit collective Forum of Incident Response and Security Teams FIRST, has released the new version… This is a post from HackRead.com Read the original post: CVSS v4.0 Released with New Supplemental Metrics, and OT/ICS/IoT Support...

FIRST Announces CVSS 4.0 - New Vulnerability Scoring System

The Forum of Incident Response and Security Teams FIRST has officially announced CVSS v4.0, the next generation of the Common Vulnerability Scoring System standard, more than eight years after the release of CVSS v3.0 in June 2015. "This latest version of CVSS 4.0 seeks to provide the highest...

CVE-2023-45142

A memory leak was found in the otelhttp handler of open-telemetry. This flaw allows a remote, unauthenticated attacker to exhaust the server's memory by sending many malicious requests, affecting the availability. Mitigation As a workaround to stop being affected otelhttp.WithFilter can be used...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, spark-operator, kubevela, kiam, up, terraform-provider-sendgrid, dgraph, k3d, src, falcoctl-fips, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kubeflow-fips, prometheus-adapter-fips, conftest-fips, metrics-server-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, up, buildkitd, dgraph, kubeflow, spark-operator, aactl, k3d, slsa-verifier, kubescape, terraform-provider-sendgrid, scorecard, cortex, src...

Moderate: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update as...

Moderate: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Moderate: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 golang: net/http, x/net/http2: rapid stream resets can cause...

ALSA-2023:5863 Moderate: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: golang: net/http, x/net/http2: rapid stream resets can cause excessive work CVE-2023-39325 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: kubernetes-fips, rancher-webhook, buildkitd, rancher-webhook-fips, kubevela, prometheus-adapter, up, caddy, kube-oidc-proxy, kubernetes, metrics-server-fips, k3s...

OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics

...

PT-2023-7334 · Unknown · Knative Serving

Name of the Vulnerable Software and Affected Versions: Knative Serving versions prior to 0.39.0 Knative Serving versions prior to v1.10.5 Knative Serving versions prior to v1.11.3 Knative Serving versions prior to v1.12.0 Description: The issue is related to an unbound memory allocation bug in...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, rancher-webhook, buildkitd, rancher-webhook-fips, kubevela, prometheus-adapter, up, caddy, kube-oidc-proxy, kubernetes, metrics-server-fips, k3s...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: cosign, prometheus-mongodb-exporter-fips, up, weaviate, prometheus-operator, tkn, kots, prometheus-postgres-exporter, src, nodetaint, vault-k8s-fips, flux-helm-controller, configmap-reload-fips, cue, pulumi, kube-logging-operator, kubernetes-csi-livenessprobe,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: cosign, prometheus-mongodb-exporter-fips, up, weaviate, prometheus-operator, tkn, kots, prometheus-postgres-exporter, src, nodetaint, vault-k8s-fips, flux-helm-controller, configmap-reload-fips, cue, pulumi, kube-logging-operator, kubernetes-csi-livenessprobe,...

CVE-2023-40141

In tempresidencynamestore of thermalmetrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Out-of-bounds

In tempresidencynamestore of thermalmetrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel has a security vulnerability that stems from a lack of bounds checking in the tempresidencynamestore method of thermalmetrics.c, which may result in out-of-bounds writes. This could result in local privilege...